Strongstep

Strongstep is a cybersecurity company based in Porto, Portugal working in grc & compliance, data protection, incident response.

Strongstep is a Portuguese consultancy based in Porto that helps organisations adopt international good practices in information security, software engineering, service management and business processes. Its information security and compliance work covers ISO 27001 implementation, GDPR (RGPD) compliance, the EU NIS2 Directive and the DORA regulation for financial entities and their ICT providers, as well as ISO 27035 incident management and ISO 22301 business continuity. The company also consults on ISO 31000 risk management, ISO 42001 AI management systems, ISO 9001, ISO 14001, ISO 13485, AS9100, ISO 20000, ISO 45001, CMMI and the Portuguese NP 4552 standard. It delivers the ITmark certification model, which it states it has been involved in for more Portuguese organisations than any other provider, and runs training, workshops, ebooks and webinars. Strongstep reports holding ITmark Services (2015) and ITmark Services Premium (2017) certifications. Its stated clients include organisations in IT, financial services, telecommunications and the public sector.